Mandiant
File-sharing platforms continue to be a threat actor favourite.
The threat actor has been moving laterally, stealing user tokens and maintaining persistence via a range of techniques.
"The core vulnerability is a help desk process that lacks robust, non-transferable identity verification for password resets..."
Threat actor decrypts malicious payloads and executes them in memory, leaving 'minimal forensic traces.'
Russia's Cozy Bear hacking operation is changing up its tactics to go after political parties in Germany
Malware avoids EDR, attains persistence, is highly stealthy
Google has agreed to buy Mandiant for $5.4 billion in cash -- a move that startled many market watchers after months of speculation that Microsoft was close to acquiring the cybersecurity company. The move comes just one year after Mandiant regained its independence, with FireEye in October 2021 selling
CVE-2019-0604 a common entry point...